Deeper integration of user rights

I really want a deeper integration of the user rights in all
existing modules.

f.e.:

I give the user the right to edit his profile, but I don't want
him to edit his own rights. As for now this isn't possible. So a
user with only a few rights can suddenly change its rights to
admin, crazy!

I don't want the client to adapt a page-template, its not his
job to do this.

Jeroen,
I see your problem, although the stuff is available in the database
we didn't implement it right from the start.
If you really want to, you can use the field "level" in the
database to calculate the custom rights.